2037c9c97c8b77206a907eaae271f91f96fbd4253786a80a3011e12645e9eea3

Sharing

Copy URL Twitter E-mail

General

Target

2037c9c97c8b77206a907eaae271f91f96fbd4253786a80a3011e12645e9eea3
Size

283KB
MD5

192df7183593ad4459cf5c0f91a32e10
SHA1

6c59ec606ce786a309702c87b70b469708b20c4d
SHA256

2037c9c97c8b77206a907eaae271f91f96fbd4253786a80a3011e12645e9eea3
SHA512

b40e85e6a6c5fb6dfac9f9f22b00bdfbde73cccaf6d12eebef1d5f1df84f989fb950567bcc7537153dfb4219b506d18d0172145a7af3f3d901775ab9e683629e
SSDEEP

6144:uK64MG/ACjfp/BjPpYefyIWxJLUqYlthluuHoyJcrqA4f:3PMG/zlxYuC2jlux/Gbf

Score

N/A

Malware Config

Signatures

Files

2037c9c97c8b77206a907eaae271f91f96fbd4253786a80a3011e12645e9eea3
.dll windows x86

4f8b9a41f64ccc4bb91f12587247c55a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

StartServiceA
RegQueryValueExA
ChangeServiceConfigA
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
ChangeServiceConfigW
EnumDependentServicesW
QueryServiceLockStatusW
StartServiceW
OpenSCManagerW
OpenServiceW
ControlService
QueryServiceLockStatusA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegOpenKeyA
RegCloseKey

comres

COMResModuleInstance

kernel32

GetEnvironmentVariableA
LocalAlloc
GetSystemDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
lstrcmpA
lstrcmpiA
SetEvent
CreateThread
CreateEventA
lstrcatW
lstrcmpW
InterlockedCompareExchange
GetLogicalDrives
GetComputerNameA
OpenEventA
Sleep
lstrcpynA
GetDriveTypeW
CreateProcessW
ReleaseSemaphore
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetDriveTypeA
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalFree
OutputDebugStringA
SetFileAttributesA
CopyFileA
DeleteFileA
lstrcpyA
GetTempFileNameA
MoveFileA
MoveFileExA
CreateFileA
CloseHandle
lstrlenA
SetLastError
lstrcpyW
lstrcpynW
lstrcmpiW
lstrlenW
GetLastError
SetErrorMode
GetVersionExA
GetComputerNameW
LoadLibraryA
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
GetCommandLineA
GetCurrentProcessId
GetLocalTime
GetSystemWindowsDirectoryA
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
GetModuleHandleA
QueryPerformanceCounter

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
free
_vsnwprintf
fwprintf
printf
malloc
_wcsicmp
swprintf
wcscpy
wcslen
wcscmp
strstr
strtok
_stricmp
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
_snprintf
fopen
strncpy
fprintf
fflush
fclose
strncat
sprintf

rpcrt4

RpcStringFreeW
UuidToStringW
UuidCreate

user32

wsprintfW
LoadStringW
CharNextA
CharPrevA
wsprintfA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wsock32

inet_addr
WSAGetLastError
gethostbyname
WSACleanup
WSAStartup

Exports

Exports

DllMain
MtxCluBringOnlineDTC2A
MtxCluBringOnlineDTC2W
MtxCluBringOnlineDTCA
MtxCluBringOnlineDTCW
MtxCluCheckIfOkToStartDtc
MtxCluCheckPointCryptoW
MtxCluCheckpointRegistryA
MtxCluCheckpointRegistryW
MtxCluCloseNodeNotify
MtxCluCreateDtcResourceKeyW
MtxCluCreateDtcResourceValueW
MtxCluCreateDtcResourceW
MtxCluCreateRecommendedLogInfo
MtxCluDeleteDtcResourceKeyW
MtxCluDeleteDtcResourceValueW
MtxCluDoesDTCResourceExistA
MtxCluDoesDTCResourceExistW
MtxCluGetComputerNameA
MtxCluGetComputerNameW
MtxCluGetDTCInstallState
MtxCluGetDTCInstallVersion
MtxCluGetDTCIpAddressA
MtxCluGetDTCIpAddressW
MtxCluGetDTCLogPathA
MtxCluGetDTCLogPathW
MtxCluGetDTCLogSizeA
MtxCluGetDTCLogSizeW
MtxCluGetDTCOwnerA
MtxCluGetDTCOwnerW
MtxCluGetDTCStatusA
MtxCluGetDTCStatusW
MtxCluGetDTCVirtualServerNameA
MtxCluGetDTCVirtualServerNameW
MtxCluGetDtcUserInfo
MtxCluGetJoinMasterA
MtxCluGetJoinMasterW
MtxCluGetListOfSharedDisksA
MtxCluGetListOfSharedDisksOnVirtualServerA
MtxCluGetListOfSharedDisksOnVirtualServerW
MtxCluGetListOfSharedDisksW
MtxCluGetListOfVirtualServersA
MtxCluGetListOfVirtualServersW
MtxCluGetNodeClusterStateW
MtxCluGetSecurityRegValue
MtxCluInitialize
MtxCluIsClusterPresent
MtxCluIsClusterPresentExA
MtxCluIsClusterPresentExW
MtxCluIsNetworkNameInLocalClusterW
MtxCluIsSameClusterW
MtxCluIsSameNodeA
MtxCluIsSameNodeW
MtxCluIsSharedDiskA
MtxCluIsSharedDiskW
MtxCluIsVirtualServerInLocalClusterA
MtxCluIsVirtualServerInLocalClusterW
MtxCluJoinDTCResource
MtxCluListNodesA
MtxCluListNodesW
MtxCluMoveDTCGroupA
MtxCluMoveDTCGroupW
MtxCluNodeNotifyA
MtxCluNodeNotifyW
MtxCluQueryDtcResourceValueW
MtxCluRegisterDTCResourceA
MtxCluRegisterDTCResourceW
MtxCluRemoveAllRegistryCheckpoints
MtxCluRemoveCheckpointRegistryA
MtxCluRemoveCheckpointRegistryW
MtxCluSetDTCLogPathA
MtxCluSetDTCLogPathW
MtxCluSetDTCLogSizeA
MtxCluSetDTCLogSizeW
MtxCluSetDtcUserInfo
MtxCluSetSecurityRegValue
MtxCluTakeOfflineDTC2W
MtxCluTakeOfflineDTCA
MtxCluTakeOfflineDTCW
MtxCluUninitialize
MtxCluUpgradeDtcResourceW
Startup
WasDTCInstalledBySQL

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 218KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f8b9a41f64ccc4bb91f12587247c55a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comres

kernel32

msvcrt

rpcrt4

user32

version

wsock32

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 58KB

.data Size: 1024B - Virtual size: 640B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text Size: 218KB - Virtual size: 220KB

.text
Size: 58KB - Virtual size: 58KB

.data
Size: 1024B - Virtual size: 640B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 218KB - Virtual size: 220KB